Email security@shaintelligence.com with the following:
Please don't publicly disclose the issue before we've had a chance to fix it. We won't take legal action against research conducted in good faith and following responsible disclosure practices.
We aim to acknowledge reports within 24 hours and provide a triage update within 72 hours.